fc58687a7b2358896fd7226d2bb703e9_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fc58687a7b2358896fd7226d2bb703e9_JaffaCakes118
Size

157KB
MD5

fc58687a7b2358896fd7226d2bb703e9
SHA1

a34831658285e1ac76903e09d5f4f9e6887d8675
SHA256

414df099aed31ad53b73c66be8b0955e17b4511dbbcb8fc986abd782b7d2eef2
SHA512

600340558160d7e533575b7bd8b436505e6e7572c071e24d22dc9280bdce8b4db192d8f3b4f2d1883ea568490794acea409d67aacb6cbe883f1c0a27fe7f2550
SSDEEP

3072:fmC2z5x1U4utA5ZzHFEcsqhi7c77mVemIafIk2QYk4riAo5QSoiZYgoh0f:faFx4A5Zhfhwc77mOgj+iAo5g4Df

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc58687a7b2358896fd7226d2bb703e9_JaffaCakes118

Files

fc58687a7b2358896fd7226d2bb703e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

221b76e8fd525d962dedef489c093cec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

GetErrorInfo
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
VariantChangeType
SysReAllocStringLen

msvcrt

calloc
atol
wcscspn
time
wcschr
memmove
memset
mbstowcs
malloc

shlwapi

SHStrDupA
PathFileExistsA
PathGetCharTypeA
PathIsDirectoryA

shell32

SHGetSpecialFolderLocation
SHFileOperationA
SHGetFolderPathA

user32

CharNextA
DrawAnimatedRects
IsCharLowerA
CharUpperA
CreatePopupMenu
IsWindow
IsCharUpperA
GetCapture
MoveWindow
LoadBitmapA

kernel32

VirtualAllocEx
GetLastError
ExitProcess
HeapAlloc
HeapFree
InitializeCriticalSection
GetModuleHandleA

version

GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA

ole32

PropVariantClear
CoGetMalloc
OleRun

gdi32

GetRgnBox

comdlg32

ChooseColorA
FindTextA
GetOpenFileNameA

Exports

Exports

9@8
_Q@20
Tr@4
_Nqw@16
8@20
baZ@8
_Rzr
6
K@16
_0@4
_48@8
_g
kbb
SB@20
_nt
__uw
_kV8@24
j
k
0o
TJB@8
elK
_HmY
_df
tzN
SfR@16
_g_F
Tq
_NLI
ELi
DZ7@12
_J0
_1
_fN@4
0
_iE@24
B
_5
_rte
tgQ
_lR
_bQz
5I@20
gax
T5@16
_Sz@24
_D
_cO@16
_Pc9
_C@24

Sections

1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

2
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

6
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

221b76e8fd525d962dedef489c093cec

Headers

File Characteristics

Imports

oleaut32

msvcrt

shlwapi

shell32

user32

kernel32

version

advapi32

ole32

gdi32

comdlg32

Exports

Exports

Sections

1 Size: 8KB - Virtual size: 8KB

2 Size: 130KB - Virtual size: 130KB

3 Size: 512B - Virtual size: 68KB

4 Size: 512B - Virtual size: 192B

5 Size: 2KB - Virtual size: 1KB

6 Size: 1024B - Virtual size: 792B

7 Size: 1024B - Virtual size: 594B

.rsrc Size: 11KB - Virtual size: 12KB

1
Size: 8KB - Virtual size: 8KB

2
Size: 130KB - Virtual size: 130KB

3
Size: 512B - Virtual size: 68KB

4
Size: 512B - Virtual size: 192B

5
Size: 2KB - Virtual size: 1KB

6
Size: 1024B - Virtual size: 792B

7
Size: 1024B - Virtual size: 594B

.rsrc
Size: 11KB - Virtual size: 12KB